Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/36322e332e31382e302f32342d3234203d3e20383334.roa
File: 36322e332e31382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: qXHuwSJ/gseBkHeJ9gcFAdj4BezxkQrOG3CWZH9egXg=
Subject key identifier: 6B:DB:38:93:8D:19:7B:1B:41:EE:C2:DF:3D:4A:F1:14:CA:75:A2:91
Certificate issuer: /CN=fedf780271797f388e08561e5b53e5259d92c86a
Certificate serial: 19FD2229AF4D7CE8D1D6C668D8DDEC1F5B3114EC
Authority key identifier: FE:DF:78:02:71:79:7F:38:8E:08:56:1E:5B:53:E5:25:9D:92:C8:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_t94AnF5fziOCFYeW1PlJZ2SyGo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/36322e332e31382e302f32342d3234203d3e20383334.roa
Signing time: Wed 26 Jul 2023 09:12:48 +0000
ROA not before: Wed 26 Jul 2023 09:07:48 +0000
ROA not after: Wed 24 Jul 2024 09:12:48 +0000
asID: 834
IP address blocks: 62.3.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:fd:22:29:af:4d:7c:e8:d1:d6:c6:68:d8:dd:ec:1f:5b:31:14:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedf780271797f388e08561e5b53e5259d92c86a
Validity
Not Before: Jul 26 09:07:48 2023 GMT
Not After : Jul 24 09:12:48 2024 GMT
Subject: CN=6BDB38938D197B1B41EEC2DF3D4AF114CA75A291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ac:6a:e2:56:49:4e:7a:6a:41:e3:5e:4e:2e:
9c:3c:5e:b8:80:6e:d0:56:02:d6:ac:6d:f2:e2:61:
31:ef:61:0a:03:db:fb:b6:da:13:60:83:c6:4c:64:
c0:3b:90:d4:b2:02:1f:5b:2a:44:85:32:d0:b9:c6:
6d:51:32:8e:12:14:81:27:7f:72:83:a5:a3:8d:b4:
2b:75:94:b0:c0:6c:e0:f1:bc:ae:fc:fe:33:14:63:
0b:f2:9a:a4:7a:c9:70:26:ae:22:05:02:dd:41:97:
5d:a9:8a:b4:6f:b5:4d:a5:20:d7:3a:fa:13:5d:74:
52:ee:01:ab:86:17:ee:28:7b:d8:34:ba:ab:97:eb:
1b:9c:82:43:d7:ff:b9:d1:09:5a:74:ff:74:e1:d8:
27:64:a0:d9:1b:c7:d6:82:eb:ca:71:6e:eb:dc:0c:
0a:18:b8:a3:ef:e6:07:48:b4:ec:85:bd:db:a2:a1:
31:51:8b:7d:93:ad:34:02:5c:91:e4:6b:43:8c:b9:
a7:cb:be:20:41:e3:51:3f:9a:27:dc:5c:a4:d2:0c:
ea:35:11:c3:ba:91:5e:21:f8:ca:ef:d5:a4:c6:82:
8d:f4:bb:36:5f:56:3a:1c:0c:cd:c9:02:95:af:c8:
21:e9:8e:9d:95:c0:0e:f2:7e:5e:a5:06:32:3a:e6:
02:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DB:38:93:8D:19:7B:1B:41:EE:C2:DF:3D:4A:F1:14:CA:75:A2:91
X509v3 Authority Key Identifier:
keyid:FE:DF:78:02:71:79:7F:38:8E:08:56:1E:5B:53:E5:25:9D:92:C8:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/FEDF780271797F388E08561E5B53E5259D92C86A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_t94AnF5fziOCFYeW1PlJZ2SyGo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/36322e332e31382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.18.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:16:bb:59:80:8e:1c:74:21:42:08:ae:6f:40:8d:e3:69:c2:
7f:6c:a4:56:1e:92:de:61:e7:26:64:bc:53:e9:b7:43:2d:ce:
2e:34:68:77:24:c2:1b:74:97:23:1e:a8:5b:5d:c5:64:2b:4d:
f1:f0:e8:9c:15:76:99:79:06:87:be:de:84:c1:ec:11:6f:cb:
3b:ce:c1:ac:36:08:bb:7a:51:2d:1a:48:f1:e5:f8:0c:7d:3f:
61:de:38:7b:fe:46:07:a2:a0:87:db:1b:01:be:9b:11:af:74:
43:f9:9f:66:d2:86:f7:63:95:f4:42:b7:52:ab:ae:67:b2:e1:
3f:1b:64:90:6b:28:cc:e6:89:7f:7f:d2:3d:77:58:3d:4e:29:
1d:ea:c6:4c:e3:de:5e:90:3e:3b:70:a6:4d:d4:61:46:23:af:
d6:44:a0:14:cf:3d:0b:17:07:80:54:b3:45:3d:87:2b:60:68:
7c:4c:3b:6b:57:08:21:e9:b0:29:ae:45:13:ce:fe:18:de:4a:
f1:17:e3:f7:e2:aa:40:88:82:35:85:d0:0b:af:42:27:33:32:
3d:86:64:d8:3e:a6:a3:84:0b:27:38:24:ba:43:52:fa:10:33:
72:2d:e4:d2:1d:13:f4:31:06:f0:12:f6:d0:fe:59:f4:8c:de:
57:b0:4e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:01 2025 by rpki-client